lmiranda
2d51df7a42
Phase 1b: Rename all ~94 commands across 12 plugins to /<noun> <action> sub-command pattern. Git-flow consolidated from 8→5 commands (commit variants absorbed into --push/--merge/--sync flags). Dispatch files, name: frontmatter, and cross-reference updates for all plugins. Phase 2: Design documents for 8 new plugins in docs/designs/. Phase 3: Scaffold 8 new plugins — saas-api-platform, saas-db-migrate, saas-react-platform, saas-test-pilot, data-seed, ops-release-manager, ops-deploy-pipeline, debug-mcp. Each with plugin.json, commands, agents, skills, README, and claude-md-integration. Marketplace grows from 12→20. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
59 lines
1.5 KiB
Markdown
59 lines
1.5 KiB
Markdown
---
|
|
name: cmdb change-audit
|
|
description: Audit NetBox changes with filtering by date, user, or object type
|
|
---
|
|
|
|
# /cmdb change-audit
|
|
|
|
Query and analyze the NetBox audit log for change tracking and compliance.
|
|
|
|
## Skills to Load
|
|
|
|
- `skills/visual-header.md`
|
|
- `skills/change-audit.md`
|
|
- `skills/mcp-tools-reference.md`
|
|
|
|
## Usage
|
|
|
|
```
|
|
/cmdb change-audit [filters]
|
|
```
|
|
|
|
**Filters:**
|
|
- `last <N> days/hours` - Changes within time period
|
|
- `by <username>` - Changes by specific user
|
|
- `type <object-type>` - Changes to specific object type
|
|
- `action <create|update|delete>` - Filter by action type
|
|
- `object <name>` - Search for changes to specific object
|
|
|
|
## Instructions
|
|
|
|
Execute `skills/visual-header.md` with context "Change Audit".
|
|
|
|
Execute `skills/change-audit.md` which covers:
|
|
1. Parse user request for filters
|
|
2. Query object changes via MCP
|
|
3. Enrich data with detailed records
|
|
4. Analyze patterns
|
|
5. Generate report
|
|
|
|
## Security Audit Mode
|
|
|
|
If user asks for "security audit" or "compliance report":
|
|
- Focus on deletions and permission-sensitive changes
|
|
- Highlight changes to critical objects (firewalls, VRFs, prefixes)
|
|
- Flag changes outside business hours
|
|
- Identify users with high change counts
|
|
|
|
## Examples
|
|
|
|
- `/cmdb change-audit` - Recent changes (last 24 hours)
|
|
- `/cmdb change-audit last 7 days` - Past week
|
|
- `/cmdb change-audit by admin` - All changes by admin
|
|
- `/cmdb change-audit type dcim.device` - Device changes only
|
|
- `/cmdb change-audit action delete` - All deletions
|
|
|
|
## User Request
|
|
|
|
$ARGUMENTS
|